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AMENDMENTS TO THE CT AIMS- 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

L (previously presented) An unauthorized-alteration detecting method comprising: 

a step in which a processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section reads from a storage section an original-image block 
j( x > y) obtained by block-dividing an original image [f] to which embedding is to be applied; 

a step in which the processing section uses the modulus P, the order N, and the root a 
specified, to apply the number theoretic transform to the original-image block fjj(x, y) to calculate 
the number-theoretic-transformed block Fij(x, y) of the original-image block; 

a step in which the processing section determines an embedding position (x 1 , y') of a 
signature image in each block according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, or a surrounding predetermined block as 
a parameter; 

a step in which the processing section reads from the storage section a pixel value gj j of the 
signature image to be embedded; 

a step in which the processing section obtains an integer having the minimum absolute value 
and satisfying Fjj(x', y') + 5 = gj (mod e) as an embedding amount 5 in each block from the number- 
theoretic-transformed block Fij(x', y') of the original-image block at the embedding position, the 
pixel value g j of the signature image, and embedding strength s; 

a step in which the processing section adds or subtracts the embedding amount S to or from 
the number-theoretic-transformed block F id (x, y) of the original-image block, based on (x, y) to 
obtain the number-theoretic-transformed block Hjj(x, y) of an embedding-applied-image block; 

a step in which the processing section applies inverse number theoretic transform to the 
number-theoretic-transformed block Hij(x, y) to obtain the embedding-applied-image block h ixj (x, y); 
and 
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a step in which the processing section obtains the embedding-applied-image block hjj(x, y) 
for each of all (i, j) blocks to obtain an embedding-applied image [h], and stores it in the storage 
section and/or outputs it from an output section or an interface. 

2. (previously presented) An unauthorized-alteration detecting method comprising: 
a step in which a processing section reads from a storage section, an input section, or an 
interface an embedding-applied-image block hij(x, y) obtained by block-dividing an embedding- 
applied image [h]; 

a step in which the processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section applies the number theoretic transform to the 
embedding-applied-image block hjj(x, y) to calculate the number-theoretic-transformed block Hy(x, 
y) of the embedding-applied-image block; 

a step in which the processing section determines an extraction position (x' 5 y') corresponding 
to an embedding position of a signature image according to a predetermined randomizing function 
which uses information of a left adjacent block, a right adjacent block, or a surrounding 
predetermined block as a parameter; 

a step in which the processing section obtains a remainder by dividing the number-theoretic- 
transformed block Hij(x\ y') at the extraction position by embedding strength s to extract a pixel 
value gi j of the signature image; and 

a step in which the processing section obtains the pixel value gjj of the signature image in 
each of all (i, j) blocks to obtain the signature image [g], and stores it in the storage section and/or 
outputs it from a display section, an output section, or an interface. 

3. (previously presented) An unauthorized-alteration detecting method comprising an 
embedding process for embedding a signature image into an original image and an extraction 
process for extracting the signature image, 

wherein the embedding process comprises: 

a step in which a processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 
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a step in which the processing section reads from a storage section an original-image block 
fij(x, y) obtained by block-dividing an original image [f] to which embedding is to be applied; 

a step in which the processing section uses the modulus P, the order N, and the root a 
specified, to apply the number theoretic transform to the original-image block fij(x, y) to calculate 
the number-theoretic-transformed block Fij(x, y) of the original-image block; 

a step in which the processing section determines an embedding position (x', y') of a 
signature image in each block according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, or a surrounding predetermined block as 
a parameter; 

a step in which the processing section reads from the storage section a pixel value gjj of the 
signature image to be embedded; 

a step in which the processing section obtains an integer having the minimum absolute value 
and satisfying Fi j(x', y 1 ) + 5 = gij (mod s) as embedding amount 5 in each block from the number- 
theoretic-transformed block FijCx', y') of the original-image block at the embedding position, the 
pixel value &j of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts the embedding amount 5 to or from 
the number-theoretic-transformed block Fjj(x, y) of the original-image block, based on (x, y) to 
obtain the number-theoretic-transformed block Hjj(x, y) of an embedding-applied-image block; 

a step in which the processing section applies inverse number theoretic transform to the 
number-theoretic-transformed block Hjj(x, y) to obtain the embedding-applied-image block hjj(x, y); 
and 

a step in which the processing section obtains the embedding-applied-image block hjj(x, y) 
for each of all (i, j) blocks to obtain an embedding-applied image [h], and stores it in the storage 
section and/or outputs it from an output section or an interface, 
and 

the extraction process comprises: 

a step in which the processing section reads from the storage section, the input section, or the 
interface an embedding-applied-image block hjj(x, y) obtained by block-dividing an embedding- 
applied image [h]; 
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a step in which the processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section applies the number theoretic transform to the 
embedding-applied-image block hjj(x, y) to calculate the number-theoretic-transformed block Hjj(x, 
y) of the embedding-applied-image block; 

a step in which the processing section determines an extraction position (x\ y') corresponding 
to an embedding position of a signature image according to a predetermined randomizing function 
which uses information of a left adjacent block, a right adjacent block, or a surrounding 
predetermined block as a parameter; 

a step in which the processing section obtains a remainder by dividing the number-theoretic- 
transformed block HjjCx', y') at the extraction position by embedding strength 8 to extract a pixel 
value gjj of the signature image; and 

a step in which the processing section obtains the pixel value g id of the signature image in 
each of all (i, j) blocks to obtain the signature image [g], and stores it in the storage section and/or 
outputs it from a display section, the output section, or the interface. 

4. (currently amended) An unauthorized-alteration detecting method according to Claim 1 
further comprising a step in which the processing section transmits the modulus P and the 

embedding-applied image [h], and, if necessary, the order N to an extraction-side apparatus through 
the output section or the interface. 

5. (currently amended) An unauthorized-alteration detecting method according to Claim 2 er 
2, further comprising a step in which the processing section receives the modulus P, which is a 
parameter of the number theoretic transform, and the embedding-applied image [h], and, if 
necessary, the order N from a transmission-side apparatus. 

6. (currently amended) An unauthorized-alteration detecting method according to ono of 
Claim[[s]] 1 te^, further comprising a step in which the processing section obtains the original 
image [fj according to the embedding-applied image [h] and the signature image [g]. 
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7. (currently amended) An unauthorized-alteration detecting method according to one of 
Claim[[s]] 1 te-3-, wherein P is any compound number generated by a power of a prime number. 

8. (currently amended) An unauthorized-alteration detecting method according to one of 
Claim[[s]] 1 te-3-, wherein N is common to an embedding side and an extraction side of the signature 
image and stored in advance in the storage section, or is transferred from the embedding side to the 
extraction side. 

9. (currently amended) An unauthorized-alteration detecting method according to on e of 
Claim[[s]] 1 te-3-, wherein the processing section selects the order N among candidates of the order 
N, obtained by N|GCD[(p, - 1), (p 2 - 1), (p m - 1)] according to a predetermined priority. 

10. (currently amended) An unauthorized-alteration detecting method according to one of 
Claim[[s]] 1 te— 3-, wherein the processing section calculates the root a uniquely determined 
according to a predetermined expression of the Chinese remainder theorem or others, based on the 
modulus P and the order N specified. 

11. (currently amended) An unauthorized-alteration detecting method according to on e of 
Claim[[s]] 1 te^, wherein 

the processing section specifies P expressed by P = pi rl p 2 r2 ...pm rm , where pi is a prime number 
and rj is a positive integer; 

the processing section selects the order N among positive integers satisfying N|GCD[(pi - 1), 
(p 2 - 1), (p m - 1)], or reads the order N from the storage section; 

the processing section calculates a root of the order N with respect to the modulus p x ; 

the processing section obtains a root a 2y \ of the order N with respect to the modulus p" from 
oci j; and 

the processing section obtains the root a of the order N with respect to the modulus P from 
a 2 ,i according to the Chinese remainder theorem. 
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12. (currently amended) An unauthorized-alteration detecting method according to ono of 
Claim[[s]] 1 te-^-, wherein the processing section uses P, N, and a to execute the number theoretic 
transform between x(n) and X(k) by the following expressions, 

X(k) = x{n)a kTX (mod P) (l) 

n=0 

N-1 

x(n) = AT 1 X(k)a~ hn (mod P) (2) 

wherein P is any compound number generated by a power of a prime number, a is a positive 
integer, N is the minimum positive integer satisfying a N = 1 (mod P), 
X = [T]x 
x = [TJ'X 

[T] is a transformation matrix, and [T]" 1 is an inverse transformation matrix. 



13. (currently amended) An unauthorized-alteration detecting method according to one of 
Claim[[s]] 1 te-3-, wherein the randomizing function uses the value of the modulus P and/or a pixel 
value in an adjacent block or a pixel value in a predetermined block which is not changed by an 
embedding process, as a parameter, and determines the position uniquely. 

14. (currently amended) An unauthorized-alteration detecting method according to one of 
Claim[[s]] 1 te^-, wherein the randomizing function is specified by the following expressions. 

x -^(^2,^/^(0,0)) (10) 
y =r yf {P, i y j, / M (0,0)) (ll) 
l = j-l (mod L) (12) 
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15. (previously presented) An unauthorized- alteration detecting program for making a 
computer execute each of the following steps, the following steps including: 

a step in which a processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section reads from a storage section an original-image block 
fij(x, y) obtained by block-dividing an original image [f] to which embedding is to be applied; 

a step in which the processing section uses the modulus P, the order N, and the root a 
specified, to apply the number theoretic transform to the original-image block fij(x, y) to calculate 
the number-theoretic-transformed block Fjj(x, y) of the original-image block; 

a step in which the processing section determines an embedding position (x', y') of a 
signature image in each block according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, or a surrounding predetermined block as 
a parameter; 

a step in which the processing section reads from the storage section a pixel value gjj of the 
signature image to be embedded; 

a step in which the processing section obtains integer having the minimum absolute value 
and satisfying Fij(x', y') + 5 = gij (mod e) as an embedding amount 8 in each block from the number- 
theoretic-transformed block Fjj(x', y') of the original-image block at the embedding position, the 
pixel value gjj of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts the embedding amount 5 to or from 
the number-theoretic-transformed block Fjj(x, y) of the original-image block, based on (x, y) to 
obtain the number-theoretic-transformed block Hjj(x, y) of an embedding-applied-image block; 

a step in which the processing section applies inverse number theoretic transform to the 
number-theoretic-transformed block Hj j(x, y) to obtain the embedding-applied-image block hj j(x, y); 
and 

a step in which the processing section obtains the embedding-applied-image block hjj(x, y) 
for each of all (i, j) blocks to obtain an embedding-applied image [h], and stores it in the storage 
section and/or outputs it from an output section or an interface. 
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16. (previously presented) An unauthorized-alteration detecting program for making a 
computer execute each of the following steps, the following steps including: 

a step in which a processing section reads from a storage section, an input section, or an 
interface an embedding-applied-image block hjj(x, y) obtained by block-dividing an embedding- 
applied image [h]; 

a step in which the processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section applies the number theoretic transform to the 
embedding-applied-image block hjj(x, y) to calculate the number-theoretic-transformed block Hjj(x, 
y) of the embedding-applied-image block; 

a step in which the processing section determines an extraction position (x\ y') corresponding 
to an embedding position of a signature image according to a predetermined randomizing function 
which uses information of a left adjacent block, a right adjacent block, or a surrounding 
predetermined block as a parameter; 

a step in which the processing section obtains a remainder by dividing the number-theoretic- 
transformed block H id (x', y') at the extraction position by embedding strength e to extract a pixel 
value gij of the signature image; and 

a step in which the processing section obtains the pixel value gjj of the signature image in 
each of all (i, j) blocks to obtain the signature image [g], and stores it in the storage section and/or 
outputs it from a display section, an output section, or an interface. 

17. (previously presented) An unauthorized-alteration detecting program for making a 
computer execute an embedding process for embedding a signature image into an original image and 
an extraction process for extracting the signature image, 

wherein the embedding process comprises: 

a step in which a processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section reads from a storage section an original-image block 
fi y) obtained by block-dividing an original image [f] to which embedding is to be applied; 
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a step in which the processing section uses the modulus P, the order N, and the root a 
specified, to apply the number theoretic transform to the original-image block fij(x, y) to calculate 
the number-theoretic-transformed block Fj j(x, y) of the original-image block; 

a step in which the processing section determines an embedding position (x\ y') of a 
signature image in each block according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, or a surrounding predetermined block as 
a parameter; 

a step in which the processing section reads from the storage section a pixel value gy of the 
signature image to be embedded; 

a step in which the processing section obtains an integer having the minimum absolute value 
and satisfying Fjj(x', y*) + 8 = gij (mod e) as embedding amount 5 in each block from the number- 
theoretic-transformed block Fij(x', y ? ) of the original-image block at the embedding position, the 
pixel value gy of the signature image, and embedding strength s; 

a step in which the processing section adds or subtracts the embedding amount 8 to or from 
the number-theoretic-transformed block Fy(x, y) of the original-image block, based on (x, y) to 
obtain the number-theoretic-transformed block Hij(x, y) of an embedding-applied-image block; 

a step in which the processing section applies inverse number theoretic transform to the 
number-theoretic-transformed block Hj j(x, y) to obtain the embedding-applied-image block hj j(x, y); 
and 

a step in which the processing section obtains the embedding-applied-image block hjj(x, y) 
for each of all (i, j) blocks to obtain an embedding- applied image [h], and stores it in the storage 
section and/or outputs it from an output section or an interface, 
and 

the extraction process comprises: 

a step in which the processing section reads from the storage section, the input section, or the 
interface an embedding-applied-image block hjj(x, y) obtained by block-dividing an embedding- 
applied image [h]; 

a step in which the processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 
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a step in which the processing section applies the number theoretic transform to the 
embedding-applied-image block hjj(x, y) to calculate the number-theoretic-transformed block Hjj(x, 
y) of the embedding-applied-image block; 

a step in which the processing section determines an extraction position (x' 5 y') corresponding 
to an embedding position of a signature image according to a predetermined randomizing function 
which uses information of a left adjacent block, a right adjacent block, or a surrounding 
predetermined block as a parameter; 

a step in which the processing section obtains a remainder by dividing the number-theoretic- 
transformed block Hij(x', y') at the extraction position by embedding strength s to extract a pixel 
value gij of the signature image; and 

a step in which the processing section obtains the pixel value gjj of the signature image in 
each of all (i, j) blocks to obtain the signature image [g], and stores it in the storage section and/or 
outputs it from a display section, the output section, or the interface. 

18. (previously presented) A recording medium having recorded an unauthorized-alteration 
detecting program for making a computer execute each of the following steps, the following steps 
including: 

a step in which a processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section reads from a storage section an original-image block 
fij( x > y) obtained by block-dividing an original image [f] to which embedding is to be applied; 

a step in which the processing section uses the modulus P, the order N, and the root a 
specified, to apply the number theoretic transform to the original-image block f id (x, y) to calculate 
the number-theoretic-transformed block Fjj(x, y) of the original-image block; 

a step in which the processing section determines an embedding position (x\ y') of a 
signature image in each block according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, or a surrounding predetermined block as 
a parameter; 

a step in which the processing section reads from the storage section a pixel value gy of the 
signature image to be embedded; 
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a step in which the processing section obtains an integer having the minimum absolute value 
and satisfying Fjj(x f , y') + 5 = gij (mod e) as embedding amount 5 in each block from the number- 
theoretic-transformed block Fij(x\ y') of the original-image block at the embedding position, the 
pixel value gij of the signature image, and embedding strength e; 

a step in which the processing section adds or subtracts the embedding amount 8 to or from 
the number-theoretic-transformed block Fij(x, y) of the original-image block, based on (x, y) to 
obtain the number-theoretic-transformed block H» j(x, y) of an embedding-applied-image block; 

a step in which the processing section applies inverse number theoretic transform to the 
number-theoretic-transformed block Hi j(x, y) to obtain the embedding-applied-image block hi j(x, y); 
and 

a step in which the processing section obtains the embedding-applied-image block hjj(x, y) 
for each of all (i, j) blocks to obtain an embedding- applied image [h], and stores it in the storage 
section and/or outputs it from an output section or an interface. 

19. (previously presented) A recording medium having recorded an unauthorized-alteration 
detecting program for making a computer execute each of the following steps, the following steps 
including: 

a step in which a processing section reads from a storage section, an input section, or an 
interface an embedding-applied-image block hij(x, y) obtained by block-dividing an embedding- 
applied image [h]; 

a step in which the processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section applies the number theoretic transform to the 
embedding-applied-image block hij(x, y) to calculate the number-theoretic-transformed block Hjj(x, 
y) of the embedding-applied-image block; 

a step in which the processing section determines an extraction position (x ! , y') corresponding 
to an embedding position of a signature image according to a predetermined randomizing function 
which uses information of a left adjacent block, a right adjacent block, or a surrounding 
predetermined block as a parameter; 
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a step in which the processing section obtains a remainder by dividing the number-theoretic- 
transformed block Hij(x\ y 1 ) at the extraction position by embedding strength 8 to extract a pixel 
value g, j of the signature image; and 

a step in which the processing section obtains the pixel value giJ of the signature image in 
each of all (i, j) blocks to obtain the signature image [g], and stores it in the storage section and/or 
outputs it from a display section, an output section, or an interface. 

20. (previously presented) A recording medium having recorded an unauthorized-alteration 
detecting program for making a computer execute an embedding process for embedding a signature 
image into an original image and an extraction process for extracting the signature image, 

wherein the embedding process comprises: 

a step in which a processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section reads from a storage section an original-image block 
fij(x, y) obtained by block-dividing an original image [fj to which embedding is to be applied; 

a step in which the processing section uses the modulus P, the order N, and the root a 
specified, to apply the number theoretic transform to the original-image block fjj(x, y) to calculate 
the number-theoretic-transformed block F^x, y) of the original-image block; 

a step in which the processing section determines an embedding position (x", y') of a 
signature image in each block according to a predetermined randomizing function which uses 
information of a left adjacent block, a right adjacent block, or a surrounding predetermined block as 
a parameter; 

a step in which the processing section reads from the storage section a pixel value gij of the 
signature image to be embedded; 

a step in which the processing section obtains an integer having the minimum absolute value 
and satisfying F;j(x', y') + 6 = giJ (mod e) as embedding amount 8 in each block from the number- 
theoretic-transformed block F iJ (x', y') of the original-image block at the embedding position, the 
pixel value g {J of the signature image, and embedding strength e; 
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a step in which the processing section adds or subtracts the embedding amount 8 to or from 
the number-theoretic-transformed block Fjj(x, y) of the original-image block, based on (x, y) to 
obtain the number-theoretic-transformed block Hij(x, y) of an embedding-applied-image block; 

a step in which the processing section applies inverse number theoretic transform to the 
number-theoretic-transformed block Hjj(x, y) to obtain the embedding-applied-image block hjj(x, y); 
and 

a step in which the processing section obtains the embedding-applied-image block hij(x, y) 
for each of all (i, j) blocks to obtain an embedding- applied image [h], and stores it in the storage 
section and/or outputs it from an output section or an interface, 
and 

the extraction process comprises: 

a step in which the processing section reads from the storage section, the input section, or the 
interface an embedding-applied-image block hjj(x, y) obtained by block-dividing an embedding- 
applied image [h]; 

a step in which the processing section specifies a modulus P, an order N which is an even 
number equal to or larger than 2, and a root a, which are parameters of number theoretic transform; 

a step in which the processing section applies the number theoretic transform to the 
embedding-applied-image block hjj(x, y) to calculate the number-theoretic-transformed block Hj j(x, 
y) of the embedding-applied-image block; 

a step in which the processing section determines an extraction position (x', y') corresponding 
to an embedding position of a signature image according to a predetermined randomizing function 
which uses information of a left adjacent block, a right adjacent block, or a surrounding 
predetermined block as a parameter; 

a step in which the processing section obtains a remainder by dividing the number-theoretic- 
transformed block Hij(x\ y f ) at the extraction position by embedding strength s to extract a pixel 
value gj j of the signature image; and 

a step in which the processing section obtains the pixel value gy of the signature image in 
each of all (i, j) blocks to obtain the signature image [g], and stores it in the storage section and/or 
outputs it from a display section, the output section, or the interface. 
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